Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7fj-4mq2-8v24

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.

EPSS

Процентиль: 51%
0.00282
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-306

Связанные уязвимости

CVSS3: 7.5
nvd
больше 6 лет назад

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.

EPSS

Процентиль: 51%
0.00282
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-306